Privacy Policy

Your account: name, email address, mobile number, password (stored only as a one-way hash, never as text), the language and currency you prefer, and your profile picture if you add one.

Your addresses: the delivery addresses you type in — building, floor or flat, street, landmark or delivery note, city, emirate and a contact number. Spare does not ask for your location and does not use your phone's GPS. There is no map picker and no current-location prompt anywhere in the app; every address is typed by you.

Your vehicles: the cars in your garage, including the chassis number if you enter one.

Your activity: orders, the items in them and the addresses they were sent to; bids you place; parts you save, compare or recently viewed; searches you run, including the words and filters you used; reviews you write; messages you send to sellers; and support requests, with any photographs you attach.

Your device: the platform and app version you are on, and a notification token so we can send you push notifications. We read the network address your requests arrive from in order to apply rate limits; we do not use it to locate you.

A private seller's listing carries the emirate the part is in, and the contact number you choose to show. You can turn the phone number off on a listing.

A vendor gives us business details: legal name, trade licence number and a copy of the licence, tax registration number, Emirates ID number, contact person, shop address and shop location, and the bank account we settle to. Bank details are stored so we can pay you, and the account number is masked everywhere it is displayed.

We never see or store your card number, its security code or its expiry date. Card details are entered directly into Stripe's own form and stay with Stripe. What Spare stores is a reference to your Stripe customer record, a reference to the saved card, and the amount, status and reference of each payment.

To give you the service you asked for: to create your account, take your order, take payment, get the part to you, run auctions and settle them, and let you talk to the seller. This is the information we need in order to perform our agreement with you.

To keep Spare safe and honest: to verify your email, to recognise a device you have used before, to apply rate limits, to check listings against the words that are not allowed, to investigate reports and fraud, and to keep an audit record of staff actions.

To meet legal and accounting obligations, which is why records of completed sales are kept even after an account is closed.

To tell you things you need to know: an order update, an auction you are watching that is about to end, a part you asked to be told about coming back in stock, a listing of yours that is expiring, and occasional service announcements.

When you place an order, the seller receives what they need to complete it: your name, your delivery address and a contact number, and the items you ordered. They do not receive your payment details.

When you view a listing, you see the seller's shop or seller name, their rating and reviews, and — where the seller has chosen to show it — a contact number, which may open a call or a WhatsApp conversation outside the app. Anything you send outside the app is no longer covered by this policy.

Photographs you upload are stored on Spare's own servers. Each one is resized and given a thumbnail.

The main photograph of a listing is converted into a numerical fingerprint so that a buyer can search by taking a picture of a part. When you search with a photograph, that photograph is compared in the same way. This runs on Spare's own servers. No photograph is sent to any outside image or AI service.

Stripe, our payment provider, for card payments and refunds. Stripe receives your name and email address and holds your card details.

Google Firebase, which provides the sign-in system. Your email address and the credentials used to sign in are held there.

Expo, which delivers push notifications to your device. It receives your notification token and the text of the notification.

Our email is sent from Spare's own mail server. We do not use a third-party marketing platform, and we never put other recipients on the same message.

Delivery partners and sellers, where they are the ones delivering your order.

Some of these providers operate outside the UAE, so your information may be processed abroad. We only use providers who commit to protecting it.

We do not sell your personal information. There is no advertising network, no analytics service and no tracking pixel in the Spare app or website.

Push notifications can be turned off in your phone's settings for Spare at any time.

Emails about an order, a payment, a verification code or an auction you are taking part in are part of the service and are sent whenever the event happens.

You can stop watchlist reminders by removing the watch, and stock alerts by removing the alert. If you would rather not receive anything other than transaction email, write to info@spareuae.com and we will take you off the announcement list.

We keep personal information for as long as your account is open and afterwards only for as long as we need it.

Records of completed sales — the order, what was in it, what was paid, and the address it went to — are kept as business and accounting records after an account is closed, with your name removed from the account itself.

Verification codes expire in ten minutes and can be used once. A device you have verified is trusted for 30 days before we ask again.

You can ask us for a copy of the personal information we hold about you; to correct anything that is wrong; to delete your account and the personal information in it; to restrict or object to a particular use; and to withdraw consent where we relied on it.

Write to info@spareuae.com and we will answer. If you are not satisfied with our answer you may complain to the UAE Data Office.

You can delete your account from the app. Before you confirm, we show you exactly what will happen to your account.

Removed completely: your saved addresses, your cart, your saved and compared parts, your recently viewed list, the cars in your garage, your notifications and your search history.

Removed from your account: your name, email address, phone number, profile picture and sign-in credentials.

Kept: your completed orders and payments, with your name removed, because both sides of a sale need the record; any reviews you left, shown as from a deleted account; and messages you exchanged with sellers about those orders.

Some things must be settled before an account can be deleted: an auction you are currently bidding on, an order that has not been delivered, cancelled or refunded, and a seller profile, which we close for you.

Passwords are stored only as one-way hashes. Verification codes are stored the same way, so nobody — including us — can read a code out of the database. Staff accounts on the admin dashboard require a second factor, and every action a member of staff takes on your data is recorded.

Card details never reach our servers. Connections are encrypted in transit.

No system is perfectly secure. If something happens that affects your personal information we will tell you and the authorities as the law requires.

Spare is not intended for anybody under 18 and we do not knowingly collect information from children. If you believe a child has created an account, write to us and we will remove it.

We may update this policy. The date at the top shows when it last changed, and we will tell you in the app if a change materially affects you.

Questions, requests or complaints: info@spareuae.com.